Fix typo on CommandLine

2024-11-07 09:48:58 +00:00 · 2021-04-19 08:20:44 +02:00 · 2021-04-19 08:20:44 +02:00 · 1d6aec3c25
commit 1d6aec3c25
parent 941d47bc28
1 changed files with 2 additions and 2 deletions
--- a/rules/windows/process_creation/process_creation_dotnet.yml
+++ b/rules/windows/process_creation/process_creation_dotnet.yml
@ -16,7 +16,7 @@ logsource:
    product: windows
 detection:
    selection:
-        Commandline|endswith:
+        CommandLine|endswith:
            - '.dll'
            - '.csproj'
        Image|endswith:
@ -30,4 +30,4 @@ fields:
 falsepositives:
    - System administrator Usage
    - Penetration test
-level: medium
+level: medium